Product
Set Up Cloud OIDC From the Pulumi CLI
The new `pulumi env setup` command configures OIDC trust for AWS, Azure, and Google Cloud, and creates ESC Environments with the login provider.
Sean Yeh
2 min readSean Yeh
2 min read
Product
Neo Security: Securing Infrastructure in the Agentic Era
Pulumi Neo Security threat models and traces attack paths across your entire cloud estate. Find and fix problems before the bad actors do.
Joe Duffy
7 min read
Best Practices
YOLO Mode Is the Right Default. Your Laptop Is the Wrong Place for It.
Prompt guardrails fail right when coding agents get dangerous. How Docker Sandboxes make YOLO mode safe, plus a ready-made kit for infrastructure work.
Engin Diri
11 min read
Product
Enforce Access Token Expiry Policies in Pulumi Cloud
Organization admins can now cap the maximum expiry of personal, organization, and team access tokens, so no credential outlives your rotation policy.
Devon Grove
4 min read
Product
Sign in to Pulumi Cloud with Passkeys
Pulumi Cloud now supports passkeys: a phishing-resistant alternative to typing your password, for users who sign in with email and password.
Devon Grove
4 min read
Product
Enforce ISO 27001 Across Your AWS Infrastructure
Align your AWS infrastructure to ISO/IEC 27001:2022 with a pre-built Pulumi policy pack of 238 ready-to-run security policies.
Dan Biwer
3 min read
Tutorials
Deploy a Private Hermes Agent on Render Securely with Pulumi, Modal, and Tailscale
Deploy a self-hosted Hermes agent as one Pulumi program across Render, Modal, and Tailscale — a code-executing AI agent with nothing on the public internet.
Engin Diri
30 min read
Engineering
How We Eliminated Long-Lived CI Secrets Across 70+ Repos
Learn how Pulumi eliminated static CI secrets across 70+ repos using Pulumi ESC and OIDC, reducing supply chain attack risk with short-lived credentials.
Boris Schlosser
6 min read
Product
Pulumi IAM Expands: Manage Access at Scale with Tags, Roles, and Teams
Pulumi IAM introduces tag-based access control and role assignments for teams and users, enabling least-privilege access management at scale.
4 authors
5 min read
Product
Pulumi Cloud Now Supports Google Sign-In
Pulumi Cloud now supports Google as an identity provider, letting you sign in, sign up, and link your Google account alongside GitHub, GitLab, and Atlassian.
2 authors
2 min readPage 1 of 5